From 95ff87565fab5c78c66e27f321d44fe362870c5e Mon Sep 17 00:00:00 2001 From: brightmt <50853930+brightmt@users.noreply.github.com> Date: Wed, 2 Oct 2024 10:52:33 -0400 Subject: [PATCH] Update set-thread-local-storage-value.md Updated link to CAPA rule --- micro-behaviors/process/set-thread-local-storage-value.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/micro-behaviors/process/set-thread-local-storage-value.md b/micro-behaviors/process/set-thread-local-storage-value.md index da8e420..ac1d9ed 100644 --- a/micro-behaviors/process/set-thread-local-storage-value.md +++ b/micro-behaviors/process/set-thread-local-storage-value.md @@ -45,7 +45,7 @@ Malware allocates thread local storage. |Tool: capa|Mapping|APIs| |---|---|---| -|[set thread local storage value](https://github.com/mandiant/capa-rules/blob/master/host-interaction/process/set-thread-local-storage-value.yml)|Set Thread Local Storage Value (C0041)|kernel32.TlsSetValue| +|[set thread local storage value](https://github.com/mandiant/capa-rules/blob/master/host-interaction/thread/tls/set-thread-local-storage-value.yml)|Set Thread Local Storage Value (C0041)|kernel32.TlsSetValue| ### C0041 Snippet